Overview

overview

7

Static

static

3

64138f3811...cs.exe

windows7-x64

7

64138f3811...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    64138f381166355ba97790b9fd633bd0_NeikiAnalytics

  • Size

    75KB

  • Sample

    240511-dhcbdshd81

  • MD5

    64138f381166355ba97790b9fd633bd0

  • SHA1

    1853c23218ab2c3570e67c58031e06e707864a9f

  • SHA256

    c616cda11923d0619021fa42ef4e0a3561f48339c6e6fea3e40114482c770872

  • SHA512

    fad7bffbb6096dbddc257582dc2e026fca309e1d6c908cbc2f6db9b84d930eec7f337521a17ed6314981f8569e3f55f4e2b16fb27c7f3146e76352cb7140d537

  • SSDEEP

    1536:s9ZPUn/YUtllEC6lyogIJq/wCg8YeY0vJTVhp2Qni3x:QPuYUJIJq/wCg8YH

Score
7/10

Malware Config

Targets

    • Target

      64138f381166355ba97790b9fd633bd0_NeikiAnalytics

    • Size

      75KB

    • MD5

      64138f381166355ba97790b9fd633bd0

    • SHA1

      1853c23218ab2c3570e67c58031e06e707864a9f

    • SHA256

      c616cda11923d0619021fa42ef4e0a3561f48339c6e6fea3e40114482c770872

    • SHA512

      fad7bffbb6096dbddc257582dc2e026fca309e1d6c908cbc2f6db9b84d930eec7f337521a17ed6314981f8569e3f55f4e2b16fb27c7f3146e76352cb7140d537

    • SSDEEP

      1536:s9ZPUn/YUtllEC6lyogIJq/wCg8YeY0vJTVhp2Qni3x:QPuYUJIJq/wCg8YH

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks